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DETAILED ACTION 

1 . The request filed 14 December 2004 for a request for Continued Examination (RCE) 
under 37 CFR 1.114 based on parent Application 09/551 ,919 is acceptable and an RCE has 
been established. An Action on the RCE follows. Claims 1-36 are pending. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1, 7, 11-12, 18, 22-23, 29, 33, 35 and 36 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Naito et al. U.S. Patent No. 5,875,345 (hereinafter referred to as Naito) 
in view of Johnson et al. U.S. Patent No. 5,664,097 (hereinafter referred to as Johnson_097). 

4. As per claims 1, 12, 23 and 35, Naito teaches a method for securing an information 
processing system such as a personal computer. The method includes an authentication 
process to start the system [column 2, lines 40-45], Naito further teaches a method for 
determining if the system has been unused for a predetermined time period by measuring the 
expiration of a predetermined time since a last user input, and the system is resumed when user 
operates the device [column 1, lines 57-62], and suspending the system if it has not been used 
for a first predetermined period [column 2, lines 45-48]. The method further includes continuing 
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operation if the system resumes back within a second predetermined time period [column 3, 
lines 63-67 and column 4, lines 1-25]. Naito also teaches performing an authentication process 
if the system resumes after second predetermined time period [column 3, lines 63-67 and 

r 

column 4, lines 1-25]. Naito does not explicitly teach performing authentication when the system 
resumes within the second predetermined time period. However, Johnson_097 teaches a data 
processing system for delaying the activation of inactivity security mechanism by inputting 
predetermined signal such as voice recognition method, for example comparing a recognizable 
stored samples of a valid user inputs [column 2, lines 35-44 and column 4, lines 26-28, 41-45]. 
Therefore it would have been obvious to one having ordinary skill in the art at the time the 
invention was made to modify the system of Johnson_097 within the system of Naito so as to 
include a process to delay locking up of a user interface as per teachings of Johnson_097. One 
would have been motivated to make such modification in order to further enhance the usability 
of the system by preventing multiple inputs of user passwords and only requiring simpler 
recognizable user inputs to delay activation of inactivity security mechanisms. 

5. As per claims 7, 18, 29 and 36, Naito as modified above teaches a method of 
authorization of a computer system. Naito further teaches continuing operation if the system 
resumes back within a second predetermined time period [column 3, lines 63-67 and column 4, 
lines 1-25], but fails to explicitly teach inputting a predetermined signal to the user operated 
device in the second predetermined period. However, Johnson_097 teaches a data processing 
system for delaying the activation of inactivity security mechanism by inputting predetermined 
signal such as voice recognition method, for example comparing a recognizable stored samples 
of a valid user inputs [column 2, lines 35-44 and column 4, lines 26-28, 41-45]. Therefore it 
would have been obvious to one having ordinary skill in the art at the time the invention was 
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made to modify the system of Johnson_097 within the system of Naito so as to include a 
process to delay locking up of a user interface as per teachings of Johnson_097. One would 
have been motivated to make such modification in order to further enhance the usability of the 
system by preventing multiple inputs of user passwords and only requiring simpler recognizable 
user inputs to delay activation of inactivity security mechanisms. 

6. As per claims 1 1 , 22 and 33, Naito. as modified above teaches a method of authorization 
of a computer system. Naito further teaches continuing operation if the system resumes back 
within a second predetermined time period [column 3, lines 63-67 and column 4, lines 1-25], but 
fails to explicitly teach inputting a predetermined audio voice signal to the user operated device 
in the second predetermined period. However, Johnson_097 teaches a data processing system 
for delaying the activation of inactivity security mechanism by inputting predetermined signal 
such as voice recognition method, for example comparing a recognizable stored samples of a 
valid user inputs [column 2, lines 35-44 and column 4, lines 26-28, 41-45]. Therefore it would 
have been obvious to one having ordinary skill in the art at the time the invention was made to 
modify the system of Johnson_097 within the system of Naito so as to include a process to 
delay locking up of a user interface as per teachings of Johnson_097. One would have been 
motivated to make such modification in order to further enhance the usability of the system by 
preventing multiple inputs of user passwords and only requiring simpler recognizable user 
inputs to delay activation of inactivity security mechanisms. 

7. Claims 2, 13, and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Naito in view of Johnson_097 as applied to claims 1,12, and 23 above, and further in view of 
Johnson et al. U.S. Patent No. 5,682,475 (hereinafter referred to as Johnson_475). 
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8. The combination of Naito and Johnson_097 teach a method of authorization of a 
computer system, but fails to explicitly teach the authentication steps. However, Johnson_475 
teaches a method and steps of the authentication. The method includes prompting a logon entry 
and a password entry [column 3, 55-60]. The method further includes, first entering a userid, 
then entering a password, and verifying that the entered userid and password correspond to an 
authorized user [column 1, 25-35]. Therefore it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to further modify the^combination of Naito and 
Johnosn_097 so as to include an authentication method as per teachings of Johnson_475, 
because it will allow a user to be granted access into the system after verifying the userid and 
password, further improving the security of the system. Therefore it would have been obvious to 
employ the teachings of Johnson_475 within the combination of Naito and Johnson_097 to 
obtain the claimed invention. 

9. Claims 3-6, 14-17, and 25-28 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Naito in view of Johnson_097 as applied to claims 1,12, and 23 above, and further in view 
of "System Mode Transition with Notification and Adoption," IBM Technical Disclosure Bulletin, 
September 1995, Vol. 38, Issue No. 9, pages 153-154 (hereinafter referred to as IBM). 

10. As per claims 3, 14, and 25, the combination of Naito and Johnson_097 as modified 
above teach a method of authorization of a computer system, but fails to explicitly teach 
prompting a user that operating session has been suspended. However, IBM teaches a system 
that notifies (prompts) users of system mode transitions (see IBM). Therefore it would have 
been obvious to one having ordinary skill in the art at the time the invention was made to further 
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modify the combination of Naito and Johnson_097 so as to include notification as per teachings 
of IBM, because this modification further notifies users of system mode; transitions as per 
teachings of IBM and allows users to be more conscious and informed about the coming 
interruption program. Therefore it would have been obvious to employ the teachings of IBM 
within the combination of Naito and Johnson_097 to obtain the claimed invention. 

11. As per claims 4, 15, and 26, the combination of Naito and Johnson_097 as modified 
above teaches a method of authorization of a computer system, but fails to explicitly teach a 
prompt comprises display of plurality of icons. However, IBM teaches a system that notifies 
(prompts) users of system mode transitions, and further suggests various ways of notifying 
users depending on the hardware and operating system (see IBM). Therefore it would have 
been obvious to one having ordinary skill in the art at the time the invention was made to further 
modify the combination of Naito and Johnosn_097 so as to include a prompt comprising a 
display as per teachings of IBM, because this modification further notifies users of system mode 
transitions as per teachings of IBM and allows users to be more conscious and informed about 
the coming interruption program. Therefore it would have been obvious to employ the teachings 
of IBM within the combination of Naito and JohnsonJ)97 to obtain the claimed invention. 

12. As per claims 5, 16 and 27, the combination of Naito and Johnson_097 as modified 
above teaches a method of authorization of a computer system, but fails to explicitly teach a 
prompt that comprises entering a screen saver mode. However, IBM teaches a system that 
uses a screen saver mode transition and prior notification of transitions (see IBM). Therefore it 
would have been obvious to one having ordinary skill in the art at the time the invention was 
made to further modify the combination of Naito and Johnson_097 so as to include a screen 
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saver mode as per teachings of IBM, because this modification further notifies users of system 
mode transitions as per teachings of IBM. Therefore it would have been obvious to employ the 
teachings of IBM within the combination of Naito and Johnson_097 to obtain the claimed 
invention. 

13. As per claims 6, 17, and 28, the combination Naito and Johnson_097 as modified above 
teaches a method of authorization of a computer system, but fails to explicitly teach a prompt 
comprises of audio signal. However, IBM teaches a system that notifies (prompt) users of 
system mode transitions, and further suggests various ways of notifying users depending on the 
hardware and operating system (see IBM). Therefore it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to further modify the combination of 
Naito and Johnson_097 so as to include audio signal notification as per teachings of IBM, 
because this modification further notifies users of system mode transitions as per teachings of 
IBM and allows users to be more conscious and informed about the coming interruption 
program. Therefore it would have been obvious to employ the teachings of IBM within the 
combination of Naito and Johnson_097 to obtain the claimed invention. 

14. Claims 8-10, 19-21, and 30-32 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Naito in view of Johnson_097 as applied to claims 7, 18, and 29 above and 
further in view of Jalili (U.S. Patent No. 6,209,104). 

15. As per claims 8, 19 and 30, the combination of Naito and Johnson_097 as modified 
above teaches a method of authorization of a computer system, but fails to explicitly teach a 
method of selecting predetermined icon displayed by a display device for authentication 
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process. However, Jalili teaches a system where a user selects predetermined icon or icons 
from a display for authentication process (column 3, lines 10-19). Therefore it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to further 
modify the combination of Naito and Johnson J397 so as to include visual authentication 
process as per teachings of Jalili. One would have been motivated to make such modification in 
view of the suggestion in Jalili, that this modification provides a system that is not easily 
susceptible to the over-the-shoulder problem (i.e., to password compromise by a third party of 
the user's keyboard data entry). Therefore it would have been obvious to employ the teachings 
of Jalili within the combination of Naito and Johnson_097 to obtain the claimed invention. 

16. As per claims 9, 20 and 31 , the combination of Naito and Johnson_097 as modified 
above teaches a method of authorization of a computer system, but fails to explicitly teach a 
method of selecting predetermined character displayed by display device for authentication 
process. However, Jalili teaches a system where a user selects predetermined alphanumeric 
character display for authentication process (fig 4. and column 3, lines 45-47). Therefore it 
would have been obvious to one having ordinary skill in the art at the time the invention was 
made to further modify the combination of Natio and Johnson_097 so as to include visual 
authentication process as per teachings of Jalili. One would have been motivated to make such 
modification in view of the suggestion in Jalili, that this modification provides a system that is not 
easily susceptible to the over-the-shoulder problem (i.e., to password compromise by a third 
party of the user's keyboard data entry). Therefore it would have been obvious to employ the 
teachings of Jalili within the combination of Naito and Johnson_097 to obtain the claimed 
invention. 
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17. As per claims 10, 21, and 32, the combination of Natio and Johnson_097 as modified 
above teaches a method of authorization of a computer system, but fails to explicitly teach a 
method of placing a cursor at a predetermined coordinate for authentication process. However, 
Jalili teaches a system where a user identifies particular location on set of coordinates for 
authentication process (Fig 6, and column 7, lines 55-68). Therefore it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to further 
modify the combination of Naito and Johnson_097 so as to include visual authentication 
process as per teachings of Jalili. One would have been motivated to make such modification in 
view of the suggestion in Jalili, that this modification provides a system that is not easily 
susceptible to the over-the-shoulder problem (i.e., to password compromise by a third party of 
the user's keyboard data entry). Therefore it would have been obvious to employ the teachings 
of Jalili within the combination of Naito and Johnson_097 to obtain the claimed invention. 

18. Claim 34 is rejected under 35 U.S.C. 103(a) as being unpatentable over Natio in view of 
Johnson_097 as applied to claim 29 above, and further in view of Flickner et al. (hereinafter 
referred to as Flickner) (U.S. Patent No. 6,282,553 B1). 

19. As per claim 34 the combination of Natio and Johnson_097 as modified above teaches a 
method of authorization of a computer system, but fails to explicitly teach inputting 
predetermined signal comprises user looking at a predetermined character at a location 
displayed on a display device. However, Flickner teaches a security method whereby the 
method includes authentication by receiving a coded input from an eye movement form a user, 
and the user gazing at least a predetermined key location (column 1, lines 50-57). Therefore it 
would have been obvious to one having ordinary skill in the art at the time the invention was 
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made to further modify the combination of Naito and Johnson_097 so as to include gaze-based 
authentication process as per teachings of Flickner. One would have been motivated to make 
such modification in view of the suggestion in Flickner that it is advantageous to use gaze- 
based authentication since it is accurate and inexpensive. Therefore it would have been obvious 
to employ the teachings of Flickner within the combination of Naito and Johnson_097 to obtain 
the claimed invention. 

Response to Arguments 



20. Applicant's arguments filed December 14, 2004 have been fully considered but they are 
not persuasive. Applicant argues that Naito fails to teach or suggest continuing the operation 
session if the user performs an authentication-update process within a second predetermined 
time period after the operating session is suspended, and continuing the operating session if the 
user performs the authentication process after the operating session is suspended in the 
second predetermined time period is exceeded. Further, the applicant argues that Johnson_097 
does not suggest a second predetermined time and an authentication-update process within a 
second predetermined time period after the operating session is suspended. The examiner 
respectfully disagrees. 



21. Naito teaches an information processing system where, the system enters a suspend 
mode when a predetermined time has elapsed since a last system operation (first 
predetermined time) [See Naito, column 4, lines 5-24], and performing authentication if the 
system resumes after a second predetermined time has elapsed [See Naito, column 4, lines 5- 
24]. Naito also teaches the system continuing without authentication, if the system resumes 
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within a second predetermined time [See Naito, column 4, lines 5-24], but Naito suggests that in 
a system where improved security is stressed authentication could be necessary [See Naito, 
column 3, lines 35-37]. Further, Johnson_097, teaches voice recognition method for delaying 
the activation of inactivity security mechanism, thereby eliminating the need for keyboard 
password authentication when a user inputs predetermined audio signal when a time limit of a 
security mechanism is about to expire [column 1 , lines 37-45 and column 4, lines 25-47]. 
Therefore, modification of voice recognition method for delaying the activation of inactivity 
security mechanism taught by Johnson_097 into the system of Naito comprising a second 
predetermined period for delaying activation of inactivity security mechanism teaches a second 
predetermined time period that relates to authentication-update process, eliminating the need 
for keyboard password authentication, further enhancing usability of the system by preventing 
multiple inputs of user passwords and only requiring simpler recognizable user inputs to delay 
activation of inactivity security mechanisms. 

Conclusion 

22. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

a) US Patent 6,715,086 B1 teaches a data processing system and method having 
time-sapn support for input device driver. 

b) IBM Technical Disclosure Bulletin, "Hardware Monitor Security Feature" August 
1989, Vol. 32, Pages 284-285, teaches screen saver security features. 
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c) Landweher, Carl "Protecting Unattended Computers Without Software" IEEE 
1997 teaches a simple hardware-based system to protect computers from unauthorized use by 
those with access to the monitor and keyboards 

23. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Beemnet W Dada whose telephone number is (571) 272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Beemnet Dada 
February 28, 2005 




